WatchGuard

Firewall & VPN

for Every Office

Simply Smarter Security

TM

Todays Internet Security Challenge

Components of

Today, an Internet Security solution is essential for any office connected to

the Internet. Firewalls, network address translation, web access and content
control, scan detection, and user authentication are just some of the complex
technologies that each office needs to deploy. Its not an easy task. If youve
ever tried to install an Internet Security solution in your enterprise, you know
how tricky it can be to install it properly--then manage and monitor it on an
ongoing basis. With hackers continually inventing new forms of attack, and
the technology to fend them off always evolving, how can you be sure the
system you put in place will stay up-to-date?

Firebox

Security Suite

Then theres complexity of creating VPNs (virtual private networks). If your

business is like most, youre probably looking at VPN technology as a costeffective way to connect your remote offices, mobile users, and telecommuters. VPNs are essential if you want to keep business communications over the
Internet private. But setting up and managing a network of VPN tunnels is
no simple task. Too often, the lack of security expertise at remote locations
adds to the problem of VPN set-up and management.

The WatchGuard Firebox System

LiveSecurity Service

Internet

System Administrator

VPN Manager Option

H o m e Office

WatchGuard SOHO|tc

Sma

l l Br a n c h O ff i c e
I I

F I R E B O X

TRAFFIC LOAD

>>
>>
<<

<<<<<

>

>>>>>

EXTERNAL

<<
<

<<<<< >>>>>
TRUSTED

OPTIONAL

Firebox II

INTERNET

Med

i u m B r a n c h O f fi c e
F I R E B O X

I I

>>
>
<<

<<<<<

TRAFFIC LOAD

>>

>>>>>

EXTERNAL

<<
<

<<<<< >>>>>
TRUSTED

OPTIONAL

Firebox II

H ea d q u a rt

po r a te

F I R E B O X

e rs

L a rg e

Br a nc h O f fi c e

I I

F I R E B O X

I I

EXTERNAL

TRAFFIC LOAD

EXTERNAL

TRAFFIC LOAD

>>

>>>>>

>

<<

<<

<

<<

<<

<

<<<<< >>>>>
TRUSTED

Firebox II FastVPN

>>

>
OPTIONAL

>>

>>

<<<<< >>>>>
TRUSTED

<<<<<

Cor

>>>>>

Now, the challenges of protecting your network with a complete Internet

Security solution and ensuring private communications with a VPN are
solved. WatchGuards Firebox System is easier to install, easier to manage,
and always up-to-date. Just plug in the right WatchGuard Firebox at the
Internet connection of each office you want to protect, use WatchGuards
Control Center software to administer protection, and subscribe to
WatchGuards LiveSecurity Service to automatically keep your Firebox
System up-to-date. Add WatchGuards VPN Manager software and multisite VPN set-up and management can be done in three easy-to steps.

Control Center

<<<<<

Easier to Install. Easier to Manage.

Always Up-to-Date.

OPTIONAL

Firebox II Plus

the WatchGuard Firebox System

SEE BELOW HOW THE WATCHGUARD FIREBOX SYSTEM COMPONENTS STACK UP TO
CREATE THE EASIEST EVER FIREWALL AND VPN SOLUTIONS FOR YOUR ENTERPRISE.

The WatchGuard Firebox is easy to install into the existing network. It simply plugs in at the Internet connection of each of your
offices to implement your security policies and protection. Each WatchGuard Firebox is designed to enable rapid deployment of your
firewall and VPN. There are four WatchGuard Firebox models tailored for every size office. Use the chart included in this brochure
to choose the Firebox that is right for your office.

The WatchGuard Firebox System integrates a comprehensive suite of security software that provides the tools you need to conduct
e-business safely. The firewall lets you control incoming and outgoing traffic between the Internet and your protected networks.
Network Address Translation (NAT) makes it possible to hide your internal IP addresses from the external network and allow internal
hosts with unregistered IP addresses to function as Internet-reachable servers. User authentication allows you to configure access rules
by user or group. Remote User Virtual Private Networking (VPN) and Branch Office VPN enable you to set up secure communication
tunnels between your protected network and traveling employees, branch offices and trading partners. Web access control enhances
productivity by filtering or blocking Web site privileges by user, group, and time-of-day or content category.

WatchGuards Control Center software is included with the Firebox System and functions as the operational headquarters for your
WatchGuard Firebox System. The software helps configure your system, implements your security policies and monitors the status
of your installed network services.
Control Center offers helpful wizards to walk you through configuring the system. The QuickSetup Wizard enables you to efficiently
create a basic configuration. Intuitive pull-down menus and icons offer an easy way to add and delete services, proxies and other
feature settings. Integrated monitoring and reporting tools provide you with real-time and historical insights into the composition
of your network traffic. At a glance, you can view user, host, service, and bandwidth usage to optimize your networks security
performance. The software also includes logging and notification features that enable you to detect and interrupt suspicious activity.

Each WatchGuard Firebox System includes a one-year subscription to the LiveSecurity Service automatically delivering threat
responses, software updates, and technical support.
THREAT RESPONSES WatchGuards Rapid Response Team, a dedicated group of security experts, monitors the Internet security
andscape to identify new threats as they emerge. The Rapid Response Team develops and transmits a software update specifically
addressing the new threat to ensure your network is continuously protected.
SOFTWARE UPDATES The LiveSecurity Service automatically transmits ongoing functional software enhancements for your entire
WatchGuard Firebox Systemfreeing you from having to track the latest software version to keep your system up-to-date. An
nstallation wizard and release notes accompany each transmission for easy installation.
TECHNICAL SUPPORT Technical Support is available directly through your LiveSecurity subscription and includes product training,
Web-based support and telephone support.
WatchGuards optional VPN Manager turns the complex task of setting up multi-site VPNs into a simple three-step process with
ts new Instant VPN technology.
VPN Manager automates the set up, management, and monitoring of multi-site IPSec VPN tunnels between an organizations
headquarters, branch offices, telecommuters and remote users. VPN Manager uses Instant VPN technology to quickly create VPNs
and reduce the ongoing daily management complexity associated with operating a network of VPN tunnels.

The Firebox System...

Firebox SOHO,
and SOHO | tc

Recommended
For

Firebox II

Firebox II Plus

Firebox II FastVPN

Small stand alone or

remote office

Stand alone business

or branch office

Stand alone business

or branch office

Stand alone business

or branch office

10 Users (upgradable to 50
Users)

1,000 Authenticated Users

5,000 Authenticated Users

5,000 Authenticated Users

ISDN or T-1 Connection

ISDN or T-3 Connection

Privacy and secure communications important

DSL/Cable/ISDN
Connections

ISDN or T-3 Connection

Firebox
Specifications
Packet Filter Throughput

9 (Mbps)

95 (Mbps)

95 (Mbps)

95 (Mbps)

HTTP Proxy Throughput

N/A

25 (Mbps)

47 (Mbps)

47 (Mbps)

1.3 (Mbps)

5.2 (Mbps)

7.5 (Mbps)

24 (Mbps)

15/5

450/150

1000/330

1000/330

N/A

150 Simultaneous Connections*

330 Simultaneous Connections*

330 Simultaneous Connections*

5 RJ-45 10BaseT Ethernet

3 RJ-45 10/100 Ethernet

3 RJ-45 10/100 Ethernet

3 RJ-45 10/100 Ethernet

Firewall

Firewall

Firewall

Firewall

VPN (Optional for SOHO,

included with SOHO | tc)

Remote User VPN

Remote User VPN

Remote User VPN

Branch Office VPN

Branch Office VPN

Branch Office VPN

Static NAT

Static NAT

Static NAT

Dynamic NAT

Dynamic NAT

Dynamic NAT

User Authentication

User Authentication

User Authentication

Web Access Control

Web Access Control

Web Access Control

Scan Detection

Scan Detection

Scan Detection

Spoofing Detection

Spoofing Detection

Spoofing Detection

Port Blocking

Port Blocking

Port Blocking

Site Blocking

Site Blocking

Site Blocking

Easy Setup

QuickSetup Wizard

QuickSetup Wizard

QuickSetup Wizard

Logging

VPN Setup Wizard

VPN Setup Wizard

VPN Setup Wizard

Internet Sharing

Security Policy Manager

Security Policy Manager

Security Policy Manager

Real-Time Monitoring

Real-Time Monitoring

Real-Time Monitoring

HostWatch

HostWatch

HostWatch

Historical Reporting

Historical Reporting

Historical Reporting

Logging

Logging

Logging

Notification

Notification

Notification

First Year Subscription

Included

First Year Subscription

Included

First Year Subscription

Included

3DES Encryption Throughput

Branch Office VPNs
(Security Associations/Tunnels)
Mobile User VPNs
Interfaces

Security Suite

Static NAT
Dynamic NAT
Web Access Control
(Optional)

Control Center

LiveSecurity

First Year Subscription

Included

*The total of Branch Office VPN plus Mobile User VPN tunnels can't exceed 150 for Firebox II, and 330 for Firebox II Plus and Firebox FastVPN.

...there's one for every office.

L a rg e

Br a nc h O f fi c e

U ser at H o m e

S E R V I C E

F I R E B O X

I I

>>
>>

>
<<

<

Co

>>
<

<<

<<

<<

TRAFFIC LOAD

>>

>

EXTERNAL

<<<<< >>>>>
TRUSTED

OPTIONAL

rp o

r a t e H e a d q u a rt

ers

Firebox II Plus

i u m B r a n c h O f fi c e

F I R E B O X

I I

Sma

>

EXTERNAL

TRAFFIC LOAD

<

<<

<<

<<

<<

<

>

>>

>>

>>

>>

<<<<< >>>>>
TRUSTED

l l Br a n c h O ff i c e

OPTIONAL

Firebox II FastVPN

F I R E B O X

I I

>>
>>

>
<<

<

>>
<<

<<

TRAFFIC LOAD

>>

>

EXTERNAL

<

<<

<<<<< >>>>>
OPTIONAL

l l Br a n c h O ff i c e

F I R E B O X

WatchGuard SOHO | tc

I I

>>

>>

TRAFFIC LOAD

>>

>

EXTERNAL

>

>>

Sma

<<

<

Firebox II

<<

<<

TRUSTED

<

<<

Med

WatchGuard SOHO | tc

<<<<< >>>>>
TRUSTED

OPTIONAL

Firebox II

There is a Firebox
for every size

VPN Manager Option

WatchGuard VPN Manager is for companies deploying multi-site VPNs.
Unlike traditional solutions, our product uses Instant VPN technology
to simply and quickly create VPNs and further reduce the ongoing daily
management complexity associated with operating multi-site VPNs. VPN
Manager 2.0 and its Instant VPN technology dramatically reduces the
work required to set up VPN tunnels between offices. Using Instant VPN,
a network administrator can set up and launch a VPN tunnel between two
Fireboxes in just three easy steps.
By eliminating the need to remember and enter information common to each
side of the VPN tunnel, VPN Manager also reduces the extra work caused
by mis-configurations.
VPN Manager also provides a complete set of monitoring and management
tools to administer Internet distributed enterprise from your central headquarters.

Choose two
Fireboxes that
you want to
VPN together.

Other Products
Available from
WatchGuard
WATCHGUARD MOBILE USER VPN

IPSec-compliant Remote Access

WatchGuard Mobile User VPN client
software runs on any Windows
95/98/2000 or Windows NT workstation
and easily integrates into your standard
WatchGuard Firebox System whenever
greater reliability and standards compliance are required. Once installed, traffic
is encrypted using DES or 3DES-CBC
encryption and data packets are authenticated using MD5 or SHA-1.
WATCHGUARD HIGH AVAILABILITY

Software to Configure a Second,

Standby Firebox
WatchGuard High Availability software
allows you to install a second, standby
Firebox into your network to ensure that
your Web site and network remain accessible to customers, business partners,
and employees.
WATCHGUARD SPAM
S CREEN

Stop Junk E-mail Now!

WatchGuard SpamScreen provides you
the means to fight back against the
deluge of junk e-mail.
IPSEC VPN FOR WATCHGUARD SOHO

Select the
level of security
you desire for
the VPN tunnel.

Launch the VPN

tunnel. You simply
send this information
to the Fireboxes
and reboot them.

Simple, Secure Communication

Across the Internet
IPSec Virtual Private Networking (VPN)
provides a simple secure way to exchange
information over the Internet.
LIVESECURITY 2 YEAR
RENE WAL SPECIAL

Lock in Protection Today!

Keeping your security software current
is critical now more than ever, and by
purchasing a 2-year renewal to your
LiveSecurity Service you can save 30%
off the cost of a yearly subscription.
With a new security vulnerability
discovered every 11 hours, keeping
your network up-to-date with the latest
software and threat alerts is a crucial
piece of your total security solution.
Your personal LiveSecurity Service
also provides expert advice from
WatchGuards council of industry
experts, technical tips on making the
most of your products, and online
support and training resources.
Act now to protect your network today!

Benefits of the WatchGuard

Firebox System
RAPID DEPLOYMENTWatchGuard Fireboxes greatly
simplify the task of installing firewall protection and
enabling multi-site VPNs. Simply plug in a WatchGuard
Firebox between your network and the router connecting you to the Internet. Whichever Firebox you choose,
WatchGuards reliable appliances give you the performance you need to keep your end users happyand
fully protected.
CENTRALIZED CONTROLWith WatchGuards Firebox

Manager software you can easily manage and monitor

your Firebox system. You can use Firebox Manager
to simply and quickly configure or change security
policies. Add VPN Manager software, and multi-site
VPNs can be setup in three steps using WatchGuards
Instant VPN technology, then monitored and
managed from a single location.
STANDARDS COMPLIANCEWatchGuard is committed to implementing VPN

and firewall technologies that are consistent

with published standards. This simplifies using
WatchGuard Fireboxes with solutions provided
by other vendors. WatchGuard Firebox System
is compliant with ICSA standards. To learn
more about ICSA certification, go to
www.icsalabs.com.

UP-TO-DATE SECURITYThe WatchGuard Firebox System includes a years

subscription to WatchGuards LiveSecurity Service to keep you and your
networks defenses up-to-date.

COMPUTER RESELLER NEWS

EDITORS CHOICE AWARD

About WatchGuard

APRIL '00

INTERNETWEEKS BEST OF
BREED AWARD
FEBRUARY '00

PC MAGAZINES EDITORS

Headquartered in Seattle, Washington, we are a leading provider of dynamic,

comprehensive Internet security solutions designed to protect organizations that
use the Internet for electronic commerce and communications. We operate
sales offices throughout North America and also in Europe, Asia and Latin
America. The award winning WatchGuard Firebox System is available in more
than 50 countries through a worldwide network of authorized resellers. We
also partner with Internet Service Providers worldwide who offer LiveSecurity
managed services to their customers who wish to outsource their security needs.

For More Information

CHOICE AWARD
JUNE '00

Please visit us on the web at www.watchguard.com to request a free informational CD-Rom that includes our product demo, or contact the reseller below
for more information.

SC MAGAZINES PICK OF 2000

DECEMBER '00

DATAMATION PRODUCT OF THE

YEAR 2000

SC MAGAZINE'S BEST BUY

AWARD
JUNE '00

CORORATE MAGAZINE'S
CORPORATE CHOICE AWARD
APRIL '00

U.S. SALES:

E-MAIL:

1.800.734.9905

information@watchguard.com

INTERNATIONAL SALES:

ADDRESS:

206.521.8340
FAX:

505 Fifth Avenue S, Suite 500

Seattle, WA 98104

206.521.8342

WEB:

Simply Smarter Security

TM

www.watchguard.com
2001 WatchGuard Technologies, Inc.
WatchGuard and LiveSecurity are either a trademark or registered trademark of WatchGuard Technologies, Inc. in the United States and other countries. ServerLock, Firebox, and Simply Smarter Security are trademarks of
WatchGuard Technologies, Inc. All other trademarks are the property of their respective owners.
Part # 0101WGCO65622